CVE-2006-5290: The ESS/ Network Controller and MicroServer Web Server components of Xerox WorkCentre and WorkCentre Pro 23...

Security readout for executives and security teams

This CVE concerns older Xerox WorkCentre devices where a web administration function could let a remote attacker bypass authentication and run commands. For executives, the business risk is control of networked multifunction printers, which can expose documents, credentials, and internal network trust paths. Exposure is most likely where the named Xerox WorkCentre models remain deployed with their WebUI reachable from user networks, management networks, or the internet. The source bundle does not provide firmware ranges, CPEs, or deployment prevalence. Treat this as a legacy infrastructure risk requiring prompt inventory and containment. Prioritize any affected devices that handle sensitive documents or are reachable beyond a restricted admin network. Mitigation focus: Check Xerox CERT XRX06-005 for supported vendor remediation guidance.; Restrict printer WebUI access to trusted administration networks only.; Remove any affected devices from internet-facing exposure..

Prepared

Jun 29, 2026, 10:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.